Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a3a2f33342d3334203d3e20323732353138.roa
File:                     323830343a383236383a3a2f33342d3334203d3e20323732353138.roa (raw, json)
Hash identifier:          VHbLnBh+MIcqX2rOknoM+7yXE3n3B6fYN0D/ZGd03VM=
Subject key identifier:   6B:3D:5E:A9:58:EE:CC:0A:E9:4E:84:A0:D8:0C:6C:BD:29:35:88:97
Certificate issuer:       /CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
Certificate serial:       2FA43B1B8EC9DA99FE4556E9F0962A93961ECF96
Authority key identifier: 31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a3a2f33342d3334203d3e20323732353138.roa
Signing time:             Wed 30 Oct 2024 01:58:51 +0000
ROA not before:           Wed 30 Oct 2024 01:53:51 +0000
ROA not after:            Wed 29 Oct 2025 01:58:51 +0000
asID:                     272518
IP address blocks:        2804:8268::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl
                          rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a4:3b:1b:8e:c9:da:99:fe:45:56:e9:f0:96:2a:93:96:1e:cf:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
        Validity
            Not Before: Oct 30 01:53:51 2024 GMT
            Not After : Oct 29 01:58:51 2025 GMT
        Subject: CN=6B3D5EA958EECC0AE94E84A0D80C6CBD29358897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:df:e8:a9:c3:50:75:89:5a:38:00:f3:17:e9:
                    d7:9a:76:ba:cc:55:39:35:26:ec:55:ae:f1:b4:04:
                    5f:96:36:bc:00:77:a7:25:36:2c:0f:73:a2:0d:cd:
                    9a:f4:26:1b:03:8c:51:d4:81:e2:ac:fd:8d:8d:8a:
                    70:bb:2c:2c:83:83:6f:1f:a5:da:14:f6:25:9b:6b:
                    e9:51:01:71:12:01:ce:6f:57:af:4f:6b:d1:8f:d9:
                    85:5b:2f:e9:2d:c9:66:64:c0:fe:de:e7:77:1f:3a:
                    e9:88:7e:97:04:0d:a8:34:30:08:95:7e:58:fe:09:
                    79:b4:ec:e1:57:af:3e:e4:c2:17:c0:c0:57:64:05:
                    35:ee:e7:0f:db:0a:6b:47:db:51:1f:e7:d8:ac:51:
                    93:5e:79:02:62:e6:75:c6:c5:18:93:6f:15:9d:bb:
                    7e:86:fb:4a:36:11:79:38:87:4b:0e:a4:fc:8f:74:
                    b0:11:8d:f7:7e:d0:62:e8:23:5a:71:cf:b4:fc:72:
                    fd:26:52:93:f5:90:f8:31:b7:2c:d1:b0:0f:08:c3:
                    1d:23:c7:11:63:71:3a:39:58:9d:0e:8f:36:3d:c1:
                    83:b4:fd:51:8a:48:cc:23:e8:19:8f:95:42:ad:f7:
                    ab:27:4c:dd:bf:6c:49:18:5c:5c:b0:c1:dc:8d:00:
                    72:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3D:5E:A9:58:EE:CC:0A:E9:4E:84:A0:D8:0C:6C:BD:29:35:88:97
            X509v3 Authority Key Identifier:
                keyid:31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a3a2f33342d3334203d3e20323732353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8268::/34

    Signature Algorithm: sha256WithRSAEncryption
         b7:c0:32:f8:47:e8:38:d2:7c:bb:a2:36:ab:55:ef:95:df:44:
         11:82:fa:f7:45:dc:a2:2c:cf:38:63:70:98:c7:87:4f:50:6c:
         b0:c6:a7:25:49:49:0f:3d:93:52:ae:be:3c:6a:54:69:38:df:
         9d:ad:95:10:f6:93:e8:77:c1:24:1c:49:93:92:05:5b:8e:eb:
         22:dd:94:6e:18:f2:a3:66:8c:8a:4c:f9:30:93:d6:11:bc:fa:
         4a:fe:6e:d5:a5:d0:d8:0f:0d:d6:2d:f3:d5:24:bf:ad:f6:6f:
         6e:c2:0b:36:72:a4:a6:12:56:84:6b:5c:18:7b:9e:3c:19:f6:
         ab:42:04:6e:a0:b7:ce:f0:32:9c:ea:b8:aa:ee:1b:46:e0:be:
         ec:8a:ce:ba:06:d6:2a:68:17:e8:ae:56:85:be:70:11:87:68:
         d3:10:5b:86:09:e4:d8:30:6c:21:4b:2e:da:95:38:45:98:cc:
         c5:c5:c5:05:f9:79:ba:39:8f:70:d3:3e:c2:09:eb:07:a4:b8:
         4f:02:7a:80:9c:30:6d:11:60:00:57:0d:58:25:9b:da:a2:a0:
         b5:ca:93:d0:89:eb:71:be:33:71:df:d3:76:d1:f7:7f:81:de:
         0b:44:dd:9f:0d:5c:51:f6:97:fb:0d:14:26:c3:39:6c:a1:2c:
         77:95:18:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:06 2024 by rpki-client on console-fra.rpki-client.org